diff --git a/security/tfsec/Makefile b/security/tfsec/Makefile
index f51c367d1014..5d316966424a 100644
--- a/security/tfsec/Makefile
+++ b/security/tfsec/Makefile
@@ -1,23 +1,22 @@
 PORTNAME=	tfsec
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.28.6
-PORTREVISION=	1
+DISTVERSION=	1.28.8
 CATEGORIES=	security
 
 MAINTAINER=	dutra@FreeBSD.org
 COMMENT=	Security scanner for Terraform
 WWW=		https://aquasecurity.github.io/tfsec
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 USES=		go:modules
 
 GO_MODULE=	github.com/aquasecurity/tfsec
 GO_TARGET=	./cmd/${PORTNAME}
 
 GO_BUILDFLAGS=	-ldflags="version.Version=${DISTVERSION}"
 
 PLIST_FILES=	bin/${PORTNAME}
 
 .include <bsd.port.mk>
diff --git a/security/tfsec/distinfo b/security/tfsec/distinfo
index eb98cc67e4a0..e3423d46c6ad 100644
--- a/security/tfsec/distinfo
+++ b/security/tfsec/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1716095961
-SHA256 (go/security_tfsec/tfsec-v1.28.6/v1.28.6.mod) = 4663e96c48fb18a2cfc98a1614bf0fa6a63fd6d2d618ed24ec7b7c70c18372be
-SIZE (go/security_tfsec/tfsec-v1.28.6/v1.28.6.mod) = 5949
-SHA256 (go/security_tfsec/tfsec-v1.28.6/v1.28.6.zip) = b8dd2655da1985833c548209bec6cafbc5ff34522ac020496aa8e1a36d6823d2
-SIZE (go/security_tfsec/tfsec-v1.28.6/v1.28.6.zip) = 6813377
+TIMESTAMP = 1719698475
+SHA256 (go/security_tfsec/tfsec-v1.28.8/v1.28.8.mod) = 911d38485ef64b26f6682ba58103286881c7cf3c2b0b1ab0a00dc002f7df8b45
+SIZE (go/security_tfsec/tfsec-v1.28.8/v1.28.8.mod) = 5949
+SHA256 (go/security_tfsec/tfsec-v1.28.8/v1.28.8.zip) = afc8b67ca4861226ba9417611043bf0b238c8df2fb0762e4636745e00f6bc21f
+SIZE (go/security_tfsec/tfsec-v1.28.8/v1.28.8.zip) = 6813420